CWE-256: Plaintext Storage of a Password
The product stores a password in plaintext within resources such as memory or files.
A kind of CWE-522 Insufficiently Protected Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 moreJohnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware6.9 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Information Disclosure5.3 Medium
- opensolution quick.cartPlaintext password display in Quick.Cart6.9 Medium
- openeclass gunet openeclass, gunet open eclass platform +1 moreGUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage7.1 High
- broadcom sannavBrocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680)6.0 Medium
- dell cloudboost virtual applianceDell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of...7.0 High
- automationdirect click programmable logic controllerAutomationDirect CLICK Programmable Logic Controller Plaintext Storage of a Password6.1 Medium
- ksenia security s.p.a. lares, kseniasecurity lares firmware +1 moreKsenia Security lares Home Automation 1.6 Remote Code Execution via MPFS Upload9.3 Critical
- zkteco biotimeZKTeco BioTime Endpoint safe_setting credentials storage6.9 Medium
- beward r&d co., ltd intercomBeward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database6.8 Medium
- turms-im turmsTurms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in...6.0 Medium
- wodesys wd-r608u, wdr122b v2.0, wdr28 +2 moreInsecure Password Storage in WODESYS WD-R608U router7.1 High
- hcl software workload schedulerHCL Workload Scheduler is vulnerable to plain text storage of a password5.5 Medium
- sgai space1 nas n1211dsSGAI Space1 NAS N1211DS gsaiagent JSONAPI GET_USER_INFO credentials storage5.3 Medium
- cinnamon kotaemonPlaintext password storage in Kotaemon 0.11.0 in the client's localStorage.7.5 High
- intelbras unnitiIntelbras UnniTI usuarios.xml credentials storage6.9 Medium
- intelbras icip, icip 30 firmware +1 moreIntelbras ICIP acessodeusuario.xml credentials storage6.9 Medium
- opensolution quick.cms, quickcms +1 moreHard-coded admin credentials in Quick.CMS6.9 Medium
- dell cloudlinkDell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may...6.7 Medium
- lenovo idea tab pro tb373fu, tab extreme tb570zu tb570fu, tab k11 plus lte tb352fu tb352xu +16 more +18 moreA potential vulnerability was reported in some Lenovo Tablets that could allow a local...6.8 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator information disclosure5.5 Medium
- jaketcooper minecraft-rconMinecraft RCON Terminal: Plain Text Password Storage in Configuration6.6 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Readable Cleartext Passwords9.4 Critical
- dell powerprotect data managerDell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Plaintext...5.0 Medium
- softperfect connection quality monitorSoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in...6.5 Medium
- suse container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1, image sles15-sp4-manager-proxy-4-3-byos, image sles15-sp4-manager-proxy-4-3-byos-azure +10 more +12 moreMulti Linux Manager epxoses the plain text HTTP Proxy user:password in logs6.9 Medium
- No product listedSoftware GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext.8.2 High
- liteon ic80a ev charger, ic48a ev charger +1 morePlaintext Storage of a Password in LITEON IC48A and IC80A EV Chargers8.7 High
- jenkins xooa, jenkins project xooa plugin +1 moreJenkins Xooa Plugin vulnerability does not mask its Xooa Deployment Token5.3 Medium
- jenkins warrior framework, jenkins project warrior framework plugin +1 moreJenkins Warrior Framework Plugin vulnerability exposes unencrypted passwords to certain authenticated users6.5 Medium
- jenkins sensedia api platform tools, jenkins project sensedia api platform tools plugin +1 moreJenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens5.3 Medium
- jenkins nouvola divecloud, jenkins project nouvola divecloud plugin +1 moreJenkins Nouvola DiveCloud Plugin vulnerability does not mask keys on its job configuration form6.5 Medium
- jenkins vaddy, jenkins project vaddy plugin +1 moreJenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration form4.3 Medium
- jenkins apica loadtest, jenkins project apica loadtest plugin +1 moreJenkins Apica Loadtest Plugin vulnerability exposes authentication tokens4.3 Medium
- jenkins apica loadtest, jenkins project apica loadtest plugin +1 moreJenkins Apica Loadtest Plugin vulnerability exposes authentication tokens6.5 Medium
- jenkins ifttt build notifier, jenkins project ifttt build notifier plugin +1 moreJenkins IFTTT Build Notifier Plugin vulnerability exposes IFTTT Maker Channel Keys6.5 Medium
- jenkins qmetry test management, jenkins project qmetry test management plugin +1 moreJenkins QMetry Test Management Plugin vulnerability exposes API keys4.3 Medium
- jenkins readyapi functional testing, jenkins project readyapi functional testing plugin +1 moreJenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentials6.5 Medium
- jenkins statistics gatherer, jenkins project statistics gatherer plugin +1 moreJenkins Statistics Gatherer Plugin does not mask AWS Secret Key5.3 Medium
- endress meac300-fnade4 firmware, endress+hauser meac300-fnade4 +1 moreCVE-2025-17096.5 Medium
- hunt electronic hbf-09kd, hbf-16nk +1 moreHunt Electronic Hybrid DVR - Exposure of Sensitive System Information9.8 Critical
- sapido br071n, br261c, br270n +9 more +11 moreSapido Wireless Router - Exposure of Sensitive Information9.3 Critical
- honding technology smart parking management systemHonding Technology Smart Parking Management System - Exposure of Sensitive Information9.3 Critical
- eskapism simple history – track, log, and audit wordpress changesSimple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode4.9 Medium
- hitachi energy asset suiteA vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If...9.1 Critical
- mici network co. ltd. netfax serverMICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in Cleartext5.3 Medium
- ibm controller, cognos controller +1 moreIBM Controller information disclosure6.5 Medium
- sap se gui for windowsInformation Disclosure vulnerability in SAP GUI for Windows4.3 Medium
- netis systems wf2220Exposure of Device Configuration without Authentication in WF22208.7 High
- arista networks eosOn affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be…6.5 Medium
- Show moreLoading…